A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /user_dashboard/add_donor.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/intercpt/XSS1/blob/main/SQL8.md | Exploit Third Party Advisory |
| https://github.com/intercpt/XSS1/blob/main/SQL8.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.299889 | Permissions Required VDB Entry |
| https://vuldb.com/?id.299889 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.516908 | Third Party Advisory VDB Entry |
Configurations
History
02 Apr 2025, 12:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.299889 - Permissions Required, VDB Entry | |
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/intercpt/XSS1/blob/main/SQL8.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.299889 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.516908 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:code-projects:blood_bank_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Code-projects blood Bank Management System
Code-projects |
18 Mar 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-17 19:15
Updated : 2025-04-02 12:30
NVD link : CVE-2025-2390
Mitre link : CVE-2025-2390
JSON object : View
Products Affected
code-projects
- blood_bank_management_system
CWE
No CWE.